Privacy Policy
Effective February 27, 2026
1. Data Controller Information
CyberArrange Security Solutions d.o.o. for computer services Gabonjin 1a, Gabonjin (Dobrinj municipality) HR-51511 Malinska privacy@cyberarrange.com
2. Categories and Types of Personal Data We Process
2.1 Employees: full name, personal identification number (OIB), IBAN, residential and domicile address, level of education attained, email address, and other data required to fulfil legal obligations. 2.1.1 Candidates for Open Positions: full name, contact details (email, phone), data shared in CV (work experience, education, skills, etc.). 2.2 External Associates and Contractors: full name, personal identification number (OIB), email address and phone number. 2.3 Customers and Prospective Customers: full name, personal identification number (OIB), address, email address, phone number, and other data required for business relationships. 2.4 Website Visitors: We collect full name and email address only from visitors who complete contact or other forms on our website.
3. Legal Bases, Purposes of Processing, and Retention Periods
3.1 Employees: Personal data is collected and processed for fulfilling legal and contractual obligations. Data is retained for up to 12 months after termination of employment, unless a longer period is prescribed by law. 3.1.1 Candidates: Personal data is processed based on legitimate interest for employee selection. Data is retained for up to one year after the selection process, then permanently deleted. 3.2 External Associates: Data is processed based on contract performance and legal obligations. Data is retained for 12 months after cooperation ends, unless longer retention is required by tax and accounting regulations. 3.3 Customers: Data is retained for 12 months after the contractual relationship ends. Data for legal obligations (invoices, accounting) is retained per applicable regulations. 3.4 Website Visitors: Data collected via contact forms is processed based on consent and retained for up to 12 months or until consent is withdrawn.
4. Cookies and Data Security
The website uses only functional cookies that are necessary for proper operation. No cookies that track and identify individual visitors are used. The data controller implements appropriate technical and organisational measures for the protection of personal data in accordance with Article 32 of the GDPR. Measures include controls over physical and logical access to personal data, restricted exclusively to persons for whom it is necessary for their work duties. Implemented measures are regularly reviewed and updated as necessary.
5. Processors and International Data Transfers
For operational efficiency, the data controller may engage third parties as processors. A data processing agreement has been concluded with each processor, ensuring they process personal data exclusively according to the controller's instructions and in compliance with applicable data protection regulations. The data controller does not transfer personal data of data subjects to third countries outside the European Economic Area.
6. Your Rights
Every data subject has the following rights: • Right of access - to obtain confirmation whether personal data is being processed • Right to rectification - to request correction of inaccurate data • Right to erasure - to request deletion when no legal basis exists • Right to restriction of processing - to request temporary restriction • Right to data portability - to receive data in structured, machine-readable format • Right to object - to object to processing based on legitimate interest • Right not to be subject to automated processing Exercise these rights by contacting privacy@cyberarrange.com. The data controller will respond within 30 days. You may withdraw consent at any time. You have the right to lodge a complaint with the supervisory authority.
7. Contact Us
For any questions about this Privacy Policy or to exercise your rights, contact us at: privacy@cyberarrange.com CyberArrange Security Solutions d.o.o. Gabonjin 1a, Gabonjin (Dobrinj municipality) HR-51511 Malinska, Croatia The data controller reserves the right to amend this Privacy Policy in accordance with changes to business processes or applicable legislation. Data subjects will be notified of significant amendments via the website. Date of last amendment: 27 February 2026
© 2026 CyberArrange Security Solutions d.o.o.. All rights reserved.